Abstract: Globally universities are increasingly dependent on information and communication technology to execute their core operations and functionalities, thus getting exposed to increasing cyber threats and consequently unprecedented security risks. Moreover, Kenyan public universities are not exceptional in using information and communication technology to execute their core operations and functionalities. The study sought to examine the common security threats facing the assets in use in Kenyan public universities. Proper identification and establishment of the security threats facing the universities would inform on the necessary mitigation controls to implement hence effectively mitigate the security risks.